threatintel

Malware Analysis – djvu – 078f25c957093eb4ed171180c617abd6

November 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 078f25c957093eb4ed171180c617abd6SHA1: 4f527b0890380b4b645d4d19d4e8bb5823725cdeANALYSIS DATE: 2022-11-22T05:53:49ZTTPS: T1082, T1012, T1060, T1112, T1222 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – bb90548c9c0dd6e411c236b55004a392

November 22, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: bb90548c9c0dd6e411c236b55004a392SHA1: 1e1db20778c735c26ac2411fa565a1ff43405327ANALYSIS DATE: 2022-11-22T03:11:47ZTTPS: T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – ef6418c5bd481f4bd21178d59c435c59

November 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: ef6418c5bd481f4bd21178d59c435c59SHA1: 764a8ca4dd4376ef3f01f3163bad4ab125b86380ANALYSIS DATE: 2022-11-22T03:45:06ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – evasion – 35697283bc104abe8ed16dff49872499

November 22, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 35697283bc104abe8ed16dff49872499SHA1: 7e56c1f57bbc5a4945e420c91d1d10eaa9018077ANALYSIS DATE: 2022-11-22T05:26:04ZTTPS: T1490, T1018, T1060, T1112, T1012, T1120, T1082, T1107 ScoreMeaningExample10Known...

Cobalt Stike Beacon Detected – 108[.]61[.]147[.]158:443

November 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 2[.]56[.]173[.]252:8091

November 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 23[.]234[.]200[.]96:2086

November 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 8[.]219[.]53[.]166:80

November 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]100[.]131[.]229:8084

November 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 185[.]130[.]45[.]148:443

November 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]142[.]149[.]110:80

November 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]139[.]105[.]143:8086

November 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]14[.]66[.]194:80

November 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 119[.]29[.]164[.]40:9000

November 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 49[.]233[.]103[.]218:443

November 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – evasion – f5adb1c319ceb270314088b86edb26e5

November 22, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: f5adb1c319ceb270314088b86edb26e5SHA1: d09463d16a534402f148f71397e1ca5522a7ed28ANALYSIS DATE: 2022-11-21T22:31:20ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – f14c38186de4c6eba0b7ff447dbdd249

November 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: f14c38186de4c6eba0b7ff447dbdd249SHA1: a782fee561f437b3845633d5b8ddbcd7de7500eeANALYSIS DATE: 2022-11-21T21:00:26ZTTPS:...

Malware Analysis – amadey – 7ec9b72df5a6f82f7e75aafdddf1bbd0

November 22, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:modiloader, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 7ec9b72df5a6f82f7e75aafdddf1bbd0SHA1: faeb74ba6cca607299cccd8130585209f1784004ANALYSIS...

Cobalt Stike Beacon Detected – 164[.]155[.]66[.]68:7777

November 22, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – discovery – ada8b955be3a762f6329c9fc50ec3f4e

November 22, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomware, spyware, stealerMD5: ada8b955be3a762f6329c9fc50ec3f4eSHA1: c64642c65127863588c0dcee7f5efe4560a79b2eANALYSIS DATE: 2022-11-21T23:10:07ZTTPS: T1060, T1112, T1012, T1120, T1082, T1005,...

Malware Analysis – djvu – 4fc8007cbf247e32a9aad217e54f3776

November 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 4fc8007cbf247e32a9aad217e54f3776SHA1: c4b7bdd7ad6134ba72eac2612b3578b409276a40ANALYSIS DATE: 2022-11-21T22:40:41ZTTPS:...

Malware Analysis – – b8f0d46ba03f682bf2c75d2bc6b71bff

November 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: b8f0d46ba03f682bf2c75d2bc6b71bffSHA1: 878f13ef8a26e7b47b0204f6a34b33ee6db4a093ANALYSIS DATE: 2022-11-21T23:21:02ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – 575209a960a7cab884fb7cd2b286526f

November 22, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 575209a960a7cab884fb7cd2b286526fSHA1: fbfeab580dc81bad84a64daf8898f0b7383b71dcANALYSIS DATE: 2022-11-21T22:49:13ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – persistence – ba92a58928b82ba662e7abb4ff4014a9

November 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: ba92a58928b82ba662e7abb4ff4014a9SHA1: 625b969f84a378bf9eac44de81461d9bd36dd34cANALYSIS DATE: 2022-11-21T23:27:06ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

threatintel

Malware Analysis – djvu – 078f25c957093eb4ed171180c617abd6

Malware Analysis – ransomware – bb90548c9c0dd6e411c236b55004a392

Malware Analysis – djvu – ef6418c5bd481f4bd21178d59c435c59

Malware Analysis – evasion – 35697283bc104abe8ed16dff49872499

Cobalt Stike Beacon Detected – 108[.]61[.]147[.]158:443

Cobalt Stike Beacon Detected – 2[.]56[.]173[.]252:8091

Cobalt Stike Beacon Detected – 23[.]234[.]200[.]96:2086

Cobalt Stike Beacon Detected – 8[.]219[.]53[.]166:80

Cobalt Stike Beacon Detected – 47[.]100[.]131[.]229:8084

Cobalt Stike Beacon Detected – 185[.]130[.]45[.]148:443

Cobalt Stike Beacon Detected – 43[.]142[.]149[.]110:80

Cobalt Stike Beacon Detected – 45[.]139[.]105[.]143:8086

Cobalt Stike Beacon Detected – 45[.]14[.]66[.]194:80

Cobalt Stike Beacon Detected – 119[.]29[.]164[.]40:9000

Cobalt Stike Beacon Detected – 49[.]233[.]103[.]218:443

Malware Analysis – evasion – f5adb1c319ceb270314088b86edb26e5

Malware Analysis – djvu – f14c38186de4c6eba0b7ff447dbdd249

Malware Analysis – amadey – 7ec9b72df5a6f82f7e75aafdddf1bbd0

Cobalt Stike Beacon Detected – 164[.]155[.]66[.]68:7777

Malware Analysis – discovery – ada8b955be3a762f6329c9fc50ec3f4e

Malware Analysis – djvu – 4fc8007cbf247e32a9aad217e54f3776

Malware Analysis – – b8f0d46ba03f682bf2c75d2bc6b71bff

Malware Analysis – ransomware – 575209a960a7cab884fb7cd2b286526f

Malware Analysis – persistence – ba92a58928b82ba662e7abb4ff4014a9

[Palo Alto Networks Security Advisories] PAN-SA-2025-0017 Informational Bulletin: Impact of OSS CVEs in Prisma SD-WAN ION

CVE Alert: CVE-2025-48703 – centos-webpanel – CentOS Web Panel

CVE Alert: CVE-2025-11371 – Gladinet – CentreStack and TrioFox

[QILIN] – Ransomware Victim: Prova

[COINBASECARTEL] – Ransomware Victim: Property Finder / PropSpace

You may have missed